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This international preliminary examination report has been prepared by this International Preliminary Examining Authority 
and is transmitted to the applicant according to Article 36. 



This REPORT consists of a total of . 



. sheets, including this cover sheet. 



I — I This report is also accompanied by ANNEXES, i.e.. sheets of the description, claims and/or drawings which have been 
' — ' amended and are the basis for this report and/or sheets containing rectifications made before this Authority (see Rule 
70.16 and Section 607 of the Administrative Instructions under the PCT). 



These annexes consist of a total of _ 



sheets. 



3. This report contains indications relating to the following items: 
Basis of the report 
Priority 

Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 
Lack of unity of invention 

Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability: 
citations and explanations supporting such statement 

Certain documents cited 
Certain defects in the international application 
Certain observations on the international application 
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Basis of the report 



. With 

□ 



regard to the elements of the international application:* 
the international application as originally filed 

the description: 



1-26 



pages 
pages 



. as originally filed 
filed with the demand 



filed with the letter of 



the claims: 
pages 



pages 
pages 



. as originally filed 

. as amended (together with any statement under Article 19 

. filed with the demand 



1-41 



. filed with the letter of 



16 April 2004(16.04.2004) 



the drawings: 

pages 

pages 

pages 



1/6-6/6 



. as originally filed 



filed with the demand 



filed with the letter of 



[ | the sequence listing part of the description: 

pages 

pages 

pages 



. as originally filed 



filed with the demand 



filed with the letter of 



With regard to the language, all the elements marked above were available or furnished to this Authority in the language in which 
the international application was filed, unless otherwise indicated under this item. 

These elements were available or furnished to this Authority in the Following language which is: 

EZ] the language of a translation furnished for the purposes of international search (under Rule 23.1(b)). 
1 1 the language of publication of the international application (under Rule 48.3(b)). 

|~] the language of the translation furnished for the purposes of international preliminary examination (under Rule 55.2 and/ 
or 55.3). 

With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the international 
preliminary examination was carried out on the basis of the sequence listing: 

I I contained in the international application in written form. 

I I filed together with the international application in computer readable form. 

I | furnished subsequently to this Authority in written form. 

I | furnished subsequently to this Authority in computer readable form. 

| | The statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 
international application as filed has been furnished. 

The statement that the information recorded in computer readable form is identical to the written sequence listing has 
been furnished. 



4. 



□ 
□ 



The amendments have resulted in the cancellation of: 

QJ the description, pages 

I the claims. Nos. 

I the drawings, sheets/fig 



I I This report has been established as if (some of) the amendments had not been made, since they have been considered to go 
' — ' beyond the disclosure as filed, as indicated in the Supplemental Box (Rule 70.2(c)).** 

* Replacement sheets which have been furnished to the receiving Office in response to an invitation under Article 14 are referred to 
in this report as " originally filed" and are not annexed to this report since thev do not contain amendments (Rule 70.16 
and 70.17). 

**Any replacement sfieet containing such amendments must be referred to under item I and annexed to this report. 
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Statement 
Novelty (N) 

Inventive step (IS) 
Industrial applicability (IA) 
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Claims 

Claims 
Claims 

Claims 
Claims 
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YES 
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2. 

1, 



Citations and explanations 

Reference is made to the following documents: 

Dl: US-A-6-092 104 (KELLY CHRISTOPHER T) 18 July 2000 
(2000-07-18) ; 



D2: 



D3: 



LAS E RVAULT UNIVERSAL SERVER ADDED FEATURES / BUG 
FIXES, [on line] 13 April 1999 (1999-04-13), 29 
March 2001 (2001-03-29), XP002182409, downloaded 
from the Internet: 

<URL : http : //laservault . com/ support /what lvus . html> 
[downloaded 2001-11-09]; 

EP-A-0 801 492 (MATSUSHITA ELECTRIC IND CO LTD) 
15 October 1997 (1997-10-15) . 



Dl describes a method for analysing the security of an 
information system, such as the one defined in claim 1 of 
the present application, which method includes a step of 
modelling the information system and a step of simulating 
potential attacks on said information system (see Dl, the 
introduction on pages 320-321 and the passage on page 
331) . 
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The subject matter of claim 1 differs from the prior art 
known from document Dl in that said claim specifies that 
the modelling step is initiated at a system component 
state value referred to as -sound" and that, in the event 
of a successful attack, the component state shifts to an 
"unsound" value. 



However, even though document Dl does not mention the use 
of a "soundness" criterion for the state in order to 
evaluate the success of the attack, it is obvious that 
taking this criterion into consideration does not lead to 
any major operational differences between the security 
analysis method described in the application and the one 
described in Dl . 

It is also obvious that, in the methodology for modelling 
and attack simulation described in document Dl, the 
propagation relationships that are capable of conveying 
attacks are bound to be taken into consideration when 
modelling the relationships between components (in this 
regard, see also the passages in sections 2 and 3 on pages 
321 and 322 of Dl) . 

Moreover, the subject matter of claim 1 does not specify 
which predicates or actions are included in the behaviour 
rules and, as a result, said predicates or actions cannot 
be differentiated from the predicates or actions in the 
behaviour rules used in the methodology described in Dl. 

In view of the above, it would be a routine technical step 
for a person skilled in the art to combine all of the 
features disclosed in claim 1. As a result, the subject 
matter of claim 1 does not involve an inventive step (PCT 
Article 33 (3) ) . 
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Dependent claims 2-38 do not contain any features which, 
in combination with the features of any one of the claims 
to which they refer, might define subject matter that 
fulfils the PCT requirement of inventive step because said 
features are considered to be obvious operating features 
in a method for analysing the security of an information 
system such as the method known from Dl. 



Contrary to the requirements of PCT Rule 5.1(a) (ii) , the 
description does not indicate the relevant prior art 
disclosed in document Dl, nor does it cite said document. 
The same is true of documents D2 and D3 . 
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